A full write-up can be found here: https://blog.securitybreak.io/building-a-threat-intelligence-genai-reporter-with-orkl-and-claude-a0ae2e969693 A Model Context Protocol (MCP) server for querying the ORKL API. This server provides tools for fetching and analyzing threat reports, threat actors, and sources. It integrates smoothly with MCP-compatible applications. Edit or create the file /Users/user
Add this skill
npx mdskills install fr0gger/mcp-securityProvides clear threat intelligence tools with good documentation but over-scoped permissions.
1# ORKL MCP Server2345A full write-up can be found here: https://blog.securitybreak.io/building-a-threat-intelligence-genai-reporter-with-orkl-and-claude-a0ae2e96969367A Model Context Protocol (MCP) server for querying the ORKL API. This server provides tools for fetching and analyzing threat reports, threat actors, and sources. It integrates smoothly with MCP-compatible applications.89---10# Quick Install11Edit or create the file /Users/user/Library/Application Support/Claude/claude_desktop_config.json12```13{14 "mcpServers": {15 "orkl": {16 "command": "uv",17 "args": [18 "--directory",19 "/MyMCP/mcptest/orkl",20 "run",21 "orkl"22 ]23 }24 }25}26```27---2829# Tools3031## Report Tools3233### Fetch Latest Threat Reports34- **Name**: `fetch_latest_threat_reports`35- **Description**: Fetch recent threat reports with their titles and IDs.36- **Parameters**: None3738### Fetch Threat Report Details39- **Name**: `fetch_threat_report_details`40- **Description**: Retrieve detailed information for a specific threat report by ID.41- **Parameters**:42 - `report_id` (required): The ID of the threat report.4344## Threat Actor Tools4546### Fetch Threat Actors47- **Name**: `fetch_threat_actors`48- **Description**: Fetch a list of known threat actors with their IDs and names.49- **Parameters**: None5051### Fetch Threat Actor Details52- **Name**: `fetch_threat_actor_details`53- **Description**: Retrieve detailed information for a specific threat actor by ID.54- **Parameters**:55 - `actor_id` (required): The ID of the threat actor.5657## Source Tools5859### Fetch Sources60- **Name**: `fetch_sources`61- **Description**: Fetch a list of sources used in threat intelligence.62- **Parameters**: None6364### Fetch Source Details65- **Name**: `fetch_source_details`66- **Description**: Retrieve detailed metadata for a specific source by ID.67- **Parameters**:68 - `source_id` (required): The ID of the source.697071
Full transparency — inspect the skill content before installing.